CVE-2024-36261

EPSS 0.06%
Published 16.09.2024 17:16:06
Last modified 23.09.2024 14:16:44
Source secure@intel.com
Teams watchlist Login
Open Login

Improper access control in Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via adjacent access.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Intel ≫ Raid Web Console

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.06%	0.19

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.7	2.1	3.6	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
secure@intel.com	3.5	2.1	1.4	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00926.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-36261

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-36261

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-36261

EUVD